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(57) Abstract: A signature device (2) encrypts a first element of a member certificate by using a first random number and public 
information disclosed by a group management device (1 ) so as to generate encrypted data. Moreover, the signature device (2) converts 
the first element by using a random number and the public information so as to create first and second converted data. Moreover, the 
signature device (2) creates knowledge signature data fi'om which the first element, the second element, and the information on the 
OC signature key will not be known and outputs a group signature including it together with a message. A verification device (3) verifies 
2^ whether the group signature has been created by using a member certificate and a signature key of a member registered in the group. 
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^2 1 2(C##t-^ {Ts^^y-^Al 1 0) o 

1 1 1) o :i(D^mmmum^mmmz^^ o 

Zq/?)^^||l ©SL^r H 2 (DSLi^^^fjc^ 2 0 2 /O^^WPSftZq/?)^^^ 2 

^ o 

X-7^y:/A2 0 2T> Bt-^{b5=^-^f^J5S#^2 0 5 Sl©gL^r<h 

g':=g''modp 
e' := r~^e^ modp 

^m^^^o ^bT. il© (g' . e ' ) ^, ^ >;t-liEH^««>m 1 r (D 

^^fc:. X-T-i/:/A2 0 3T\ ^1 (D^M-7'-:^f^fife#^2 0 6«> ^ 2 ©gL^ 
h'-y'^r modp 

^ff^f-So ^:®h' ^^>A—m^Mm<Dmi(D^mr(Dmi(D^m'T'-^L\i^ 

mmiZ. X^y'yA2 0 41:\ ^2(^^^T'-^f^^^#m2 0 ^ 3 (DSL 

^ a ^: ^ >n-iIEi^»®m 1 r ^ A:^ ^: bT. 

J := G'H^ mo d P 
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'^\z. x-7"-/yA2 0 0 ^i)mmm^'f'-'^^^m, 

tK^ >;t— SE^g* (r, fc^fj|;;-r§«€^a ^^oTVi^;ii, Bf-^^h:^^— 

b< Bf-^>fbbfefe<D7?s.§;ia:^. ^>n-iiE?g« (r, €) . m^mo. mi 

g' = mod p 

e' = r~V modp 

h' = y'f " mod p 

J = GW modp 

e'h' = fV"h-Vmodp 
re[0,p-l] 

^mr^-r (r, l, a, r, CO, a) ^^-p TV^^ i (r. I, o, r, 
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^ •fe ^ D 

r+(f)2j e [0, p-1] 

r + <l>2j-i e [0 »p - 1] r + <|)2j G [0 ,p - 1] 



r + <i>2j-i e [0, p- 1] 
^ /^cC § J: d tcfil ^ff c 

Vj := y*2j-lf ^j-l I y*2j£^j j^*2j-l jjTi2j-l II Q*2j jjn2j 

^^tC, ^PS#:Zq©7C t 1, t2, t 3, 1 4, t^^^y^AlZMZS. ^tl^^m 
Ti := yi f *2 modp 

T2:=f^2g-t3 li-*4 jnodp 

T3 := g*5 modp 
Cj := e^^ mod p 
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gj :=g J modp 
Jj := G'j H^'j modP 



c:= w(g||h||f||G||H||y||e||vJ| .H|vjT,||T3||T3||gJ| .•.||g.||Ja|| ••• llJkllm) 



. c [ j ] =0(Dt^ 

X := »72^— 1 

tvj := 'y^ rood ^ 
'.= %Jtj xnod p 

. c [ i ] = 1 (Dt.^. 
V6rf-3 := w + V^i-i 

v^^-i := a + i72j~i 
:= G'^'fH*"^ 
:= 7^ — r mod ^ 

^3 •= «j — aejru~^ mod |? 



^Bt^f^o c [j] «c © j hcDfg^^f o 



c^^XS (v 



V 
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h' = y^f"modp t^^D J = G'^H"modP J^^O re[0,p-l] 

c^XXS (si, s2, s3. s4, s5) (DW^mt. ^ >/t— iiE§g» (r, €) t: 
eV = fV°liV modp h' = y^f mod p f)^-^ g' = g'modp 

5 

a5 ^ ;i b T § „ 

c^^n (wi, • • • , Wk, z 1, • • z ^2©^^^- 
10 J = G'^H^ mod P 3^^0 g' = mod p e' = r'^e"^ mod p 

e' ) . ^1 ©^m-T^-iS^h' . ^2©^^^^-^$^ J, mmm^y"-^ (c, V 

15 1' Vg, V4, Vg, Vg, • • • Vgk-S. V6k-4. Vgk-a. V6k-2. V 

6k-l' Vgk' Si, S 2, S3, S 4, S 5, Wi, • • • Wk, z 1, • • • z k) 

^ iJ7';i/- y i b T m :tj T -§) o 

m^^Ao s t.mmt^^^x^m.vtz.^^yn-mmm (r, ^^nm^m 

^~^mxU. :^>n-mmm (r, *5i;tXW^Ma^m^&fflViTUE$ 
M ^ )1 U T # ^ H 1 ^ fj; „ 
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c =;^(g||h||f||G||H||yle||v;|| -IKIT/IT^ ||T^||g; 1 -\\M\ - ||JL||m) 

23 = a'^a" 

ji _ i G^iH'i mod P c[;] = 0 
^ ~ \ J^''H'i mod P c[i] = 1 
(where := e*l^e"'" modp) 

^ y/^^-mmmm 5 ^ >/t-jaii^##^ 503 ■^t. mmmm 301 tr^a 

r := g'^/e' mod p 



cM = 0 
cy] = 1 
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c:=>^(g'|e'|f-e'||g'^) 
s := 6 — ce mod q 



ku, r. t, Su>} (D^-fy^^. un-^rirz.}^yn— mmm (Dm i(o^m 

V 

iim—(D:^>n—m.mm(Dmi(ommr^^ti:^>n-^)7.Y du. spku, 

i^±MB^brcck-5^c, ^mmmm\zj;:nu. m^^t^~-^i^m^^2 o 5. m 
>n-mmmizm-r^m^^. mz^)v-':rm^<D^mtLxm^-^ti^ ^ t 

^ymm ^jv—y°m^ j'-^'^^i=>m^^izmT^ it # ^# ^ ^ i: # -r\ 
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01 m2 (Dmmmm(D^')v~-y'm^>^:^y'j^(Dm^m^^'ry''uy 
ns-c^T'Diz^m'r^m^^mizmM'r^m. ^mm(Dmzmmt:^^^o ^i~ 

TVi^o ^Td. mmmm3}tmi<Dmmmmhmm(Dmm.^^hxi^^^o 

01, 701, 801. ^T^m^mmmmmmm^^ 6 0 2, 702, s 0 2. ^wl 

^>n—^m^mQ 0 3, 7 0 3, 8 0 3. ^cfctKSL^^^§§6 0 4, 7 0 4, 
8 0 4^^bTli^o &,Tmm<Dr;ii^. >A-iJ->'*^S^e 6 ViT^BJ-T 

•S o 

^miit5:M^#^^#^ 6 0 i«, moDyOz-^—^y^^mmmtmrn^m^tji 
^7^my^>/-^—^y^mm^m6 0 3xm^^^^m^mmmm^^]^v. 
mmmmmmm^ e o 2 icm^ f^o 

m2izMi^x^>/^-mmm^m=fT^o rctzv. ^m^wt-^^^^e 0 3 
f)^mt!'r^?^>/^-mmm}-i.^i^xuyf^>;^-mmmhLx<Dmm^wrdr£^K 
m^mm2}-^^^ y/'^-'wmmm-^-^B^^'fm'Drc^y/t-mmm-A^^Wiizmmt 
^?>^>;-^—mmm^wYW'r^z.^^^x^^o 
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^^6 0 3 -r^ffl-r^sLic^^^t-^o 

MWcm^m^m 901, 1001, 1101. ^^mj^mmmimmu^ 902, 

5 1002,1102. ^m.^ 903, 1003, 1103. Sim 

^^1^^9 0 4, 1 0 0 4, 1 1 0 4^WbTVi§o £;Tffi#(D;^Js?). P<>A*— 

/^^^e.. ^m^>A-3ii{®^#^9 0 3-efflVi-5>^m3iw^^^^^!feb. ^m?6{gF 
10 tj^if #fB'it§i5 9 0 2 tcm::^j-r^o 

^^^mii^ij^it^SBiigB 9 0 2«. ^miim^i^ii^^^^M 9 0 i-v^^vr^ 

&. :^iiE^e3©^fiE#^3 0 iT^a$nfc:^*;i'-7°^^i. ^^m^aii^tj^'if 
15 igtBi!igi5 9 0 2izmm,-^tir^^^mmm^mt. ^y;^—mmm^^mi 027? 

SL^^^:§g9 0 4J1. ^miim^^Si^^^^ 9 0 l:feJ;rX:$:M!t^>/t-5ilga^ 

#^9 0 sxmm-r^n.m^^m'r^o 
^rmwizmmmhvx. miommmrnhmmiz. ^')i-y°mmmmi(Dm 

(p ,q,P,g,h,f ,G,H,;i) 

^^^b. ^n^^pg-lf^g^^^l^l 0 l:^>^T?S^T^o 

25 ^^jc. Hi. 112. m3(D?^>;%-^y'mmmm6. 7. 8©^t5:iimM^# 

^^#^6 0 1. 7 0 1. 8 0 1<D#^;0^\ ;><>7^-^^(Cffl l/i'5^^M<h^m 
SB^Ii^f^^b. 5>tS:Mli^^m^^M1fM'ltgP6 0 2. 7 0 2. 8 0 2 

izmmt^o ^wcmmmu. m^xmmmtvx(Dm^i^^rc-^y3i\^^-^^. s-d 
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:^mmmm'V}±. —mtVX. Pedersen<D"A Threshold 
Cryptosystem without a Trusted Part 
y" (Advances in Cryptology-EUROCRYPT'9 

1. pp. 5 2 2 - 5 2 6) ^z^-^nrcmmMWcmmizm-^Km^^^oii^WLmm 

mi. ^2, ^3®^>;t— +h>'*WaSS6, 7, 8©#^«, Zq±<Z) 
^ f 1 ( z ) 

f i(z) = ai(] + aiiZ + 3^22^ modq 

m2. us ©>^>A— ii-:/«ii^«7, 8fe. ^tli|Wl#(C f 2 (z) . f 3 (z) 

^ 1 ©p< th^^S^S 6 

= h*'" mod p , = h^^^ jjjod p , H^g = h^^^ j^^^^ p 

o 

IHilfC, B2(D^>A'-1f:/«=ii^«7«H2i, H22. Haa^Hl 43J:tX|| 

H32, H33^Bi*5cfcrj?^2(D^>n— y-:/^a^tt6. 7fc^§o 

clilTaio' ^20. a 3 o^'^tl-^'tl u 1, L> 2, u 3 t^WBf •2> i:, u 1, l> 2» 
Yi = H^Q = h"^ mod p » y2 = H20 = h.^ mod p , 73 = H3Q = h"^ mod p 
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^2 =fi(2)mod q 
1^3 = fj (3) mod q 

1 (D ^ >;n— itt/^Si^K 6 iz. 

i^23 =f2p)mod q 

10 ^m3(D^>;^-D-^^mmm.8\z. mm^iz. mm-r^o ^fc. m3<D^>n- 

= (l) mod q 

7^^ibU^„ H32, H^s^^ZS 

^1 

20 ^1 

^21 

25 

^1 

'So 
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h'^^^ = (R^,f ■ (Jl^^f ■ (Hss/' mod p 

^ >/t— ti-:7^«^s^a(D#^(*. ^^comuiz^m't^h. ^(Dm(DmK>7t(D?(^ 

10 '^^21 

^1 

15 W^^^-oTzlM^. ^2=0, y 2= 1 ibT, ^ni^>^i^coMa^Mtt^<. 
y = yi*y2'y3* mod p 

-^{tm. t-r^m ©TC ^ S6 § 56 © It m ^t5t ^ nfciil © 

25 ^n^encD^m.^mmt^mm.um.^Q 0 2. 702. 

8 0 2 \z.umrr^o 

nm\z. mi. m2. m'^(D:^yn—^-^&%^m.^. 10. ikd^wmwl 
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MBim^f^^^9 01, iooi> 1101 ?^>/'^-jMmizm^^^^jkmm^ 
mmmmmmmmi^d 0 2. 1002, 1 1 0 2f::t3'it-r^o sfe> ^^n^^^ 

(r, 5) ^^zsm^^mo^mm^T^o 

10 W^^S 2 2 1 3 01 0©X7^^;/yA 1 0 l;0^e>A 1 0 4 <h|WI 

ii(D»f^{cj;D.^5©a^^^g§2 1 4x^^vrcmmi^zq7b^BmAjmmo 

15 6. 7. siD-r^Tizmmir^o 

■ot^^i. m2. us copo/t—ti-yws^ee, 7, s^^ti^^n. mio© 

^iiE®^, mi. ^2, m3(D^>A— tf->'^t^a^B6, 7. 8 Ji, ^tfcp^ > 

ki, kg, ka^ffh^f^o ^t^L. ^io:>^yn—^':r^m.mm.Q\t 
m2(D:^>n—^^mMmm\t 

t2 =h''2 modp 
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t3 = modp 

^'jkmrnrnm^^mi o i izmtj-r^o ^r^. 

t = ti - t 2 ' tg mod p 

fe^r^B'if 1 0 1 izxm^-^n^o 

;kiz. mi. m2. ^3©^>;t->y->^^a^g6, 7, <ikmmmt^ 

r := Ijjh.^ mod p 

^^ij^'itfgfB'isgp 6 02, 702, 802 izmm-^ nTc^mm^M u i, 2. 
ug^ffivix, mi. m2. m3(D^y;^—i)-:fmmmm6> 7. 8(D^^^t 

4i = ki - rv>i mod q , ^2 = ^3 - mod q , ^<kX^ §3 = k3 - rug mod q 

(D^^^nYMT^o ^bT, Si cD^>;t— it:/wase6^s (r, 5 1) 

8« (r, €3) t:m^mm2\z^n^nmm'r^o 

m^mm2\t. STOo^cz^Wt-SEB^* (r. S^) , (r, ^2) . (r, 
h^i = tiY^ modp , =1372^ modp , ^3 j:tf h^^ = t^Ys'' modp 
^Sff2(imi, M2, US (D^>n— tf:/^SS«6, 7, 8 ^Cp^ >;t— SEi^ 

»^5im-r#;fee^®^t-^o -€-0)^, ^^^e2^i. mi. m2. S3<d^> 
6 ^ 7. 8-A>^^nm^rc:^x0^>;'<-mmm(Dm2(D^m 
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m^^mi 0 2\zmij'r^o 

:$^mmmmi^\'t. m^^m2\z:hn^m^i'^m. ^mmm3iz:^n^m^^m 
^-^mKDmmmmhmmizniDn^o 
10 mi. ^2. m3(D^>/'^—i)-:fm^mm9. lo, i i(D^>n— Mii^^g 

9 0 3> 1 0 0 3, 1 1 0 3 J^^(D<fc5fc»'f^t"'5o 
^1, ^2, ^3(D^>n— tJ->^3ai®l;^B9> 10, 11«, ST, #;16n 

rc^ji^-y'm^iz^^n^m^it'T-^ (g' . e' ) ©m-^^tf^o 
— iJ-^^'jiiifl^^BQ, 10, 1 icD^^it. ^m7^mm^^mmn'^mm9 02, 10 
15 02, 1 1 0 2(D^^\zmm-^nrc^WLmmm^i^e ^, e^, ss^m^^x. 

g\ :=g"^ modp , g2 := g'^^ modp , := g'=^ modp 

^tf^f ^i:, ^x^nr:i^}v-:fm^(Dm^m\zm^'r^^>n—ummo:>u 
20 -^^^ 
f 

^#§ii<h>o^*T#^o ^bx, ^1 o^M?#M<i: Iridic, :^>n-mm.mm^m 

1 0 2tC^^$nfe^>A— h {<Iu, spku, r, S^>} (D^ti^B. 
25 ^ 

^iIrI— (D, ^>n— ijEgg#(D^l ©^^r &#tr;><.>;t-UX h (lu, spku, 

r, Su) ^^^b, ^^\^r^:^yn-^):^v\z-n)^t^m^mm.2^m^ 
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5 t < n/2 

fi(z) = aio + ajiZ + ...+ QjtZ* modq 

(Dmm tl^xmm-^ nts: ai^ V^T IJET § ^ J6 . > n-ji li^ ^:IiK^^;^cS:lJ 

^(Dm^m^^M-r^mm^^jv-ywrnrnm^^^m^i-r^m^iz. ^^(c^sij 
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§ ^jv- y°m^ ^f^^iSc b . ^^ji^- y'm^ (Dm^^^mm ^^ji- y © ^ >7t-T^ 



n>6i © >n— © ^ > A-ii0^# (3^^ 1 ©^**5 cfc rx^ 2 MtB 
i)^<D:^>A—(D:^>n—wtmm\z.^^n^^i(Dm:m^^xs^2(Dm:mt.mum 
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10 mm^m^^^^>/^-mmm^i^}^v. mn^m^mm\zmmT^y^>/'<-mmm 

^'-^izMVXttmy^>/'^—^mm^M^m^^Xi^mvrcNyh erg-Rue 
15 ppe im^X^^. »5^^3tCWB«(D^;V'--7°^^>'XT-Ao 

5. mm^^jv-y'^mmmit. mm^ikmmmizMxx. MfB^>n-t^ii^g 
^rcumMm4izmm(D^)v-^m^>^::^^j^o 

20 

6. Wxrct^?^>/^-^mB^jv-yizmmT^ t^. mwc^i^wct-r^m^i^ 
<DmM(D7t(D. mmz^m.-^nr^m(D3t><Di-z)^^M(D^m^>^'^-mmmm 
mtvxmK)^x. mm^m.^y/'^-^mmmm^^Mxmm'r^t^iz. mm 

25 m^-^ ^\zmv. 

m^^m2izmm(D^^jv—y°m^zy::^y^Ao 
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7. m^^^wci:T^m§.^(D7nttsi^^o\z?^>;'^-mmmmm^mzs. m 

mmm^mmumt^micD^m^^^itvxmt^mnity^-^^i'^j^'r^t^ 

^m-^nrcm(Dot>(D^Mizwii:)mx^i-z>x$>r)^ ^>;^~mm^jkmmf)^. m 

mmm^mm^^msEmi<Dmm^m^^ti^xm$^m^ih^~-^^m}^'r^h^ 
mm<ikm'mmtvxmm:^>/^-mm^j>mm^m\^^. 
mm^jv-'f^mmmumm?^>/^-mmm^mm^>/'^'-mmt\^xm^iy 

m^)\^-':/m^iz^^nx\^^^ff^^ity^-^\zMvx^M(Dm$a^my^>^'<-m 
mmmm^m^^xmM(Dm-w^i^rcmMf)-^&:m^^m^mw:h. mm^)v-':fm 
mmmzxmm-^nx\^^^\/^-tnf3^(Dmu^ yn—mMm(omi<D^mhti^—^ 
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zLtcD-v^^ y°m^ ^f^^ b . y°m^ (Dm^m-^mm ^^ji- y ® ^ 
tu IB :/'^mmm ^ v ^ t . 

^ IB 'It ?g <h ^ ffl T Bt-^Yb b T Ht-^lbT^ - ^ ^ ^ X ^ y , 
20 BufBUl ©^*$^3 (DSL^43J;O^^MtB^^9l1f#^fflV^T^mbTS2 cD^m 

t^mKD^m. :fej;txtrfBB2(D^^50^e.. mm^^^t'T-^. lutB^K^^m 
m^mm^^- ^^^^)v—y°m^tvxwm^y^-i^hmziii:h-r^y.y^yy' 
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1 1. iy7.'rM.]Hx^m\z.mm-t^<tkmmm^m(Dmmf)-^^^m'^m\zm^'r 

BMlomm. ^ZSmn^^ 2 (D^mf)^ ^ . tuSBBt-^^tT"— MlB^ 1 
•T^-^. ^J;tXMtBll2<D^m5^-i«7;Ot|wiD{ii^7ntc{t^$tiTV:>§e:,h^iiE0^ 
BJtgT^D:d^otutB^l (D^*, MtB^2®^m> *5 j;rXttfSB^iSlli::M'r^'If 
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$ i± ^ -7°^^ :7° n ^ A T ^ o T . 

mmrnKD^my"-^. mmm2(D^m^-i^. m^(Di^mzmr^^^m 
mmrnKD^my'—^. :is^zsmm^2(D^m^^—^:^mcm^7€izi^m 



wo 2005/071880 



1/12 



PCT/JP2005/001177 



1 



CO 





^1 M 

Cj u 




1 ^ 














IS 












1 







1 












A 









oo 

"1 



o 

CM 



1 


o 
eg 


1 


CO 








mil 




tip. 




Alt 


Gig 




S 1g 




S 1g 




S 










CO ^ 




^ =W 































wo 2005/071880 



2/12 



PCT/JP2005/001177 



401 



4 



402 



403 




wo 2005/071880 



3/12 



PCT/JP2005/001177 


























Q ^ 




















mm 




mm 




mm 




mm 


3 








via 







wo 2005/071880 



4/12 



PCT/JP2005/001177 




CNJ 



1 









CSI 




CO 








5 

CM 


nVti 


o 

CNJ 




CD 

eg 




o 














Q 




Q IS 


S m 










I 












mm 




mm 






















vFn 



wo 2005/071880 



5/12 



PCT/JP2005/001177 




wo 2005/071880 



6/12 



PCT/JP2005/001177 



6 




101 



102 



wo 2005/071880 



7/12 



PCT/JP2005/001177 



07 



401 



n 




5: 


m 


















Hi 








405 















404 



402 



403 



1 

,__zr^ 



101 



102 



08 



501 



502 



504 



503 



1 



101 



102 



wo 2005/071880 



8/12 



PCT/JP2005/001177 



5 



501 



503 



502 



c 



1 



__£r:i 



101 



102 



wo 2005/071880 



9/12 



PCT/JP2005/001177 



mi 0 



I 



A101 
A102 



A103 



A104 

W 



A108 




A109 

















Alio 









c 



END 



A105 








r 











A107 



A111 



C 



END 



wo 2005/071880 



10/12 



PCT/JP2005/001177 



1 1 



c 



3 



A201 



m 1 O^m-r""^ ^#J3)c 



IS 2 co^^-r— ^-f^J^fe 



A202 



A203 



A204 



A205 



A206 



wo 2005/071880 



11/12 



PCT/JP2005/001177 




wo 2005/071880 



12/12 



PCT/JP2005/001177 




INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP2 0 05/0 0117 7 



A. CLASSIFICATION OF SUBJECT MATTER 
Int. CI'' H04L9/32, G09C1/00 



According to International Patent Classification (IPC) or to both national classification and IPC 

B. FIELDS SEARCHED 

Minimum docinnentation searched (classification system followed by classification symbols) 
Int. CI'' H04L9/32, G09C1/00 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 

Jitsijyo Shinan Koho 1922-1996 Ibroku Jitsuyo Shinan Koho 1994-2005 

Kokai Jitsijyo Shinan Koho 1971-2005 Jitsuyo Shinan Toroku Koho 1996-2005 



Electronic data base consulted during the international search (name of data base and, where practicable, search terms used) 
JICST FILE(JOIS), WPI, INS PEC (DIALOG) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with iadication, where appropriate, of the relevant passages 



Relevant to claim No. 



Kozue Umeda, Atsuko Miyaji, "A Group Signature 
Scheme based on Nyberg-Ryeppel Signatures", 
2 0 03 Nen Ango to Joho Security Symposium 
Yokoshu, Vol.1 of 2, 2 6 January, 2 003 
(26,01.03), pages 327 to 332 

Takamitsu KATO, Shoichi HI ROSE, Michihiko 
MINO, Katsuo IKEDA, "ElGamal no Kokai Kagi 
Angokei ni Motozuku Group Shomei ni yoru 
Shomei Protocol", 1992 Nen The Institute of 
Electronics, Information and Communication 
Engineers - Soritsu 75 Shunen Kinen - Shuki 
Taikai Koen Ronbunshu, separate Vol.1, 15 
September, 1992 (15.09.92), page 1*187 



1-12 



1-12 



I ^ I Further documents are listed in the continuation of Box C. 



I I See patent family annex. 



* Special categories of cited documents: 

" A " document defining the general state of the art which is not considered 
to be of particular relevance 

"E" earUer application or patent but published on or after the international 

filing date 

"L" document which may throw doubts on priority claim(s) or which is 
cited to establish the publication date of another citation or other 
special reason (as specified) 

"O ' document referring to an oral disclosure, use, exhibition or other means 
'T document published prior to the international filing date but later than the 
priority date claimed 



later document published after the international filing date or priority 
date and not in conflict with the application but cited to understand 
the principle or theory underlying the invention 

document of particular relevance; the claimed invention cannot be 
considered novel or cannot be considered to involve an inventive 
step when the document is taken alone 

document of particular relevance; the claimed invention cannot be 
considered to involve an inventive step when the document is 
combined with one or more other such documents, such combination 
being obvious to a person skilled in the art 

document member of the same patent family 



Date of the actual completion of the international search 
26 April, 2005 (26.04.05) 


Date of mailing of the international search report 
17 May, 2005 (17.05.05) 


Name and mailing address of the ISA/ 

Japanese Patent Office 
Facsimile No. 


Authorized officer 
Telephone No. 



Form PCT/ISA/210 (second sheet) (January 2004) 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP2 0 05/0 0117 7 



C (Contmuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 


Citation of document, with indication, where appropriate, of the relevant passages 


Relevant to claim No. 


P,X 


Shoko YONEZAWA, Jun FURUKAWA, "Kanrisha Bunsan 
ni Tekishita Group Shomei Hoshiki", 2004 Nen 
Ango to Joho Security Symposium Yokoshu, 
Vol.2 of 2, 27 January, 2004 (27.01,04), 
pages 1167 to 1172 


1-12 



Form PCT/ISA/210 (continuation of second sheet) (January 2004) 



lt±iJS#^ PCT/J P 2 0 0 5/0 0 1 1 7 7 



A. mm<Dm-r^^m<D^m mmMm^^m (IPC) ) 

Int. Cl^ H04L9/32, G09C1/00 



m^^n^it.M4mmn mmmf^m d pc) ) 

Int. CI' HO 4 L 9/3 2, G09C1/00 



1922-199 6^ 
1971-200 5# 
1994-200 
1996-200 5!^ 



J I CST:7t^/> ( J O I S) , WP I, INSPEC(DIALOG) 



Kozue Umeda, Atsuko Miyaji, "A Group Signatue Scheme based on 
Nyberg-Ryeppel Signatures" , 

2 0 0 S^Bf-^t'lf P >'/^°v^?> A^^i^, 

Volume 1 of 2, 2 0 0 3. 0 1. 26, 
p. 327 — 332 



1 — 12 



in— . mmmm, mm^^, "e i g ama i <d<^ 

1 9 9 2^«^'lt#ait^#-iljA^7 5j^=^ia;i:-i'C^^#miim 
^Wr 1,1992. 09. 15, p. 1-187 



1 — 12 



r&j n-^^x >- h 7 T 5 y — 



2 6. 0 4. 2 0 0 5 



17 5. 2005 



B^fcH^fF/T (I SA/J P) 
100-8915 
m^ii5=Pft ffl EK^iS MHT g 4 » 3 ^ 



5M 



4 2 2 9 



S|g#-§- 03-3581-1101 3 5 9 7 



^^PCT/I SA/2 1 0 (m2-<-v') (2004*^1^) 



H^tfclJfi#-i- PCT/J P 2 O O 5/0 0 1 a 7 7 









P, X 


2 0 0 4^Bt-^^'lt#-fe=3p.^ y -7-^ i/:/>Kv^!?A^mS, 

Volume 2 of 2,2004.01.27, 
p. 1167 — 1172 


1-12 



^^PCT/I SA/2 1 0 (m2-<-i^©i^#) (2 0 0 4^1^) 



